Hi,
I am sending you the ASCII pic with this mail - which has some idea
about configuration.
Bridge Machine (br0) IP : 192.168.11.201
(Gateway machine / need to be used as Transparent proxy)
+---------------------------------------------+
| |
| |
| |
| |
| |
| |
+---------------------------------------------+
| |
eth0 eth1
| |
| |
| | FTP Content Server (192.168.11.60)
| +------------------------>
|
|
|
| TO INTRANET / INTERNET
+-------------------------------->
People tries to access the FTP Content Server from Intranet and
Internet Side. The Bridge machine is running on Bridge Mode and
Transpwerent Proxy.
For passing packets to T-PROXY, I have setup IPTABLES rules like -
iptables -t nat -A PREROUTING -p tcp -d 0/0 -s 0/0 --dport 21 -J DNAT
--to 192.168.11.201:2370
But it seems that packet is forwarded by Brdige before it reaches the
iptables rule and thus T-PROXY tool is not able to process the packet.
Also, I am running Redhat 7.3 with kernel 2.18-3 and iptables 1.2.5
version. I am using the latest bridge utils - and while I run brdige
utils and setup iptables rule together - the kernel panics saying
Aiee - Killing interrupt handler
interrupt - no syncing
What should I do to handle these two problems - please reply asap.
Thanks fopr help
Tejas Vora
On Fri, 08 Oct 2004 15:44:23 -0700, Stephen Hemminger
<shemminger@xxxxxxxx> wrote:
> On Wed, 2004-10-06 at 18:44 -0700, TEJAS VORA wrote:
> > Hi,
> >
> > I am using my machine as a Bridge and running transparent proxy on it.
> > My question is - where the brdige will work?
>
>
> What does the it look like in more detail. What are machine's
> interfaces and IP addresses, more config info or picture (ASCII).
>
>
> > Do brdige will forward the packet before it reaches to iptables rule?
> > If yes then what is the solution - as I want to use my machine as
> > Transparent proxy and I have setup iptables rules on it.
> >
> > I have tried so many times - look at the tcpdump also - but it seems
> > that packets are not following iptables rule and just being forwarded
> > normally.
> >
> > Config is :
> >
> > FTP server - 192.168.11.160
> > Bridge - 192.168.11.201
> >
> > I have setup jftpgw FTP transparent proxy on bridge. Which listens on
> > port 2370. I have set a iptables rule
> >
> > iptables -t nat -A PREROUTING -p tcp -d 0/0 -s 0/0 --dport 21 -J DNAT
> > --to 192.168.11.201:2370
> >
> > Now I am trying to access FTP Server (192.168.11.160) from out side -
> > and checking the tcpdump on the Brdige (proxy) machine for port 2370 -
> > but nothingis coming up. Also on FTP machine the tcpdump shows direct
> > connection. So it seems my transparent porxy is not coming in between
> > and bridge is directly forwarding packet.
> >
> > What is the solution to this problem?
> >
> > Thanks,
> > Tejas
> > _______________________________________________
> > Bridge mailing list
> > Bridge@xxxxxxxxxxxxxx
> > http://lists.osdl.org/mailman/listinfo/bridge
>
>
